PHP Image

[hagman9]

I was just browsing around HackThisSite when I came across the quoteheader.php file. It really intrigues me because you have it linked to the main page using an image tag, but its a php file and it can also be linked to using BBCode [img] tags.

Code: Select all

<img src="/images/quoteheader.php" alt="Header Fill" width="780"  />

I've been trying to work on duplicating it, since you could add your own code in quoteheader.php to do whatever you want, but have came up empty so far. It would be really nice if someone could explain to me how this is done or at least give their opinion on how to do it.

[BhaaL]

Theres two ways to go.

One is simply forwarding to the file:

Code: Select all

<?php
$randomFileName = generateRandomImageFileName();
header('Location: /my/image/folder/' . $randomFileName);
?>

The other is generating the image using GD, and sending it as output (also works for the first one, if you want to keep the filenames secret):

Code: Select all

<?php
header('Content-type: image/jpeg');
//send image stuff here, imagejpeg() or similar. also works:
readfile('/my/image/folder/' . $randomFileName);
?>

[hagman9]

I think you misunderstood me. I'm not trying to make a random image generator, im trying to get a php file able to be opened through [img] tags.

[mutants_r_us_guild]

it wont OPEN but it will execute... if you had a page named logout.php and you put it in img tags... it would silently log you out. This is used for CSRF. It will only show an image if the page has an image output.

[BhaaL]

I think you misunderstood me. I'm not trying to make a random image generator, im trying to get a php file able to be opened through [img] tags.

Ah well, thats a setting in your-board-software-here. Most have an option to allow/disallow dynamic image (those with .php) in order to avoid CSRF and other stuff like mutant just pointed out.

[leonidas_heaven]

I just want to ask that can any one tell me the link to download PHP which have GD already included in it..

[BhaaL]

For windows, you may want to look into XAMPP from www.apachefriends.org. It includes the latest Apache2, the (almost) latest PHP5 with most useful libraries and the latest version of MySQL, together with phpMyAdmin prepackaged and preconfigured for standard use.

For *nix, you may want to look into your package manager. Apt-based systems (Debian, *ubuntu, some others) got php5-gd, Emerge (Gentoo, Sabayon) has a similar package, aswell as Slackware (same as Debian, also php5-gd iirc). From Binary, look at http://php.net/gd

[Dr_Phil]

I think you misunderstood me. I'm not trying to make a random image generator, im trying to get a php file able to be opened through [img] tags.

Ah well, thats a setting in your-board-software-here. Most have an option to allow/disallow dynamic image (those with .php) in order to avoid CSRF and other stuff like mutant just pointed out.

This maybe is a stupid question, but can't you link to logout.gif and then tell your PHP to parse gif files as they was php files?

[Rijnzael]

That's accomplished using configuration directives for the web server in question in either httpd.conf, or if the directive is allowed, in the .htaccess file for the applicable directory. I believe the line goes something like 'AddHandler application/x-httpd-php .gif', though there are other variations that work depending on the version of apache and the php module in question.

[leonidas_heaven]

Thanks, Bhaal that version of PHP was the one i was searching from many days..and Btw you are great as always..Thanks